Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!

Please turn on your JavaScript for this page to function normally.
work
Companies seeking an MSP doubt their ability to spot cyberattacks

Businesses looking to outsource cybersecurity want providers that can help them recover from attacks, manage AI risks, and explain what security problems mean for their …

attack
An average of 8 minutes is all hackers need to log in with stolen credentials

Attackers used stolen credentials to log in an average of eight minutes after infection across 27 confirmed infostealer cases, according to a report from Elastic Security …

AI
99% of repository access tokens never expire

Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts …

healthcare
Healthcare can’t govern the AI tools it hasn’t found yet

Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten …

shadow AI
Companies are spending more on AI governance and getting less control

Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to …

identity
Most consumers aren’t ready to let AI agents shop unsupervised

Customer control, account security and ease of use are influencing the adoption of AI agents that make purchases, book services and access personal information, according to …

AI
Companies going all in on AI could see their strategy backfire

Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive displacement …

Voice
Fake IT help desk callers got by on little more than names and email addresses

Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access …

cybercrime
Scammers rebuild fake shopping sites within hours of a takedown

One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card …

smart home
Smart TVs can harbor unpatched security flaws and track what you watch

Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. …

certificates
IT bosses are confident they’ve found the certificates they don’t know about

Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because …

identity
Shame and sleepless nights haunt scam victims long after the money is gone

Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam …

Don't miss

Cybersecurity news
Daily newsletter sent Monday-Friday
Weekly newsletter sent on Mondays
Editor's choice newsletter sent twice a month
Periodical newsletter released for important security events and breaking news
Weekly newsletter listing new cybersecurity job positions
Monthly newsletter focusing on open source cybersecurity tools